News for hackers. Stuff that matters.

A comment on Postmortem: TanStack npm supply-chain compromise. Parent comment

Re:Postmortem: TanStack npm supply-chain compromise by Gigachad on Monday May 11, 2026 @09:42PM (#48103176)
Sure, without exploits they can steal your api keys, read your personal data, and access your browser data. With exploits they can update packages on your computer too.
[ Parent | on HN ]
Re:Postmortem: TanStack npm supply-chain compromise by lrvick on Monday May 11, 2026 @10:45PM (#48103606)
No exploits needed. A simple shell alias will suffice. See my example in sibling comment.
[ Parent | on HN ]